GLOBAL PRIVACY POLICY 

The security of personal data has become one of the top priorities for organisations, and in a global and highly interconnected company such as ours, ensuring the inviolability of this information must be a priority objective. In this sense, we wish to be transparent and make this Privacy Policy available to everyone who interacts with us. 

This Policy has a global character since, although whenever we collect your data, we shall provide you with specific information on the processing, we should like to draw up and make available to you the present document, where you can find and consult the general and relevant information on our practices with regard to the Protection of Personal Data, as well as our relations with those third parties who may access or collect such data on our behalf. 

This Policy applies to Acciona, SA and all Acciona Group companies, defined as those over which Acciona, SA exercises, directly or indirectly, control over their capital and/or management; you can check out the individual companies that make up this Group at any time at https://www.acciona.com/es/accionistas-inversores/informacion-financiera/cuentas-anuales/ 

 (collectively referred to as “ACCIONA”). The references in this Privacy Policy to "ACCIONA", "we", "us" and "our" concern the Data Controller in charge of processing your personal information, which, in general, will be the entity that collects, processes and at any time identifies this information. 

One of ACCIONA's principles is to respect the regulations of each of the countries in which it operates, adapting its information systems to the specific regulations for processing the data of anyone who, for whatever reason, has dealings with us. ACCIONA undertakes to process personal data in accordance with personal data protection regulations and more specifically, whenever applicable, with the provisions of Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, in conformity with and with respect for the applicable local legislation in each case, meaning that in some jurisdictions this Policy could be supplemented by the corresponding local regulations.  

This Privacy Policy is applicable to all Users, these being understood to be visitors to the website, as well as any other person who provides us with personal information through the various channels (hereinafter, "User" or "Users"). In this context, Channels are the various means or services that we make available to you to permit you to interact with us, whether or not they involve registration, such as websites, applications, platforms, mailboxes, addresses or telephone numbers for the provision of information or assistance to Users, profiles on social networks, forms, events, etc. 

Some of our Online Channels may contain links to other non-ACCIONA third party websites and applications. This Privacy Policy does not apply to these. Please also review the privacy policies of such third parties to familiarise yourself with their practices. They may also contain cookies from third parties that are not owned or controlled by ACCIONA. In this case you can choose your third party cookie settings by using our Cookie Settings Tool, where you can manage your preferences, which you can access by clicking on "Cookies". 

ACCIONA adopts the technical and organisational measures necessary to guarantee the security of personal data and to prevent the alteration, loss or unauthorised processing of or access to such data, taking into account the state of the art, the nature of the data and the risks to which the data are exposed. You may also confirm the presence of the SSL certificate by checking the Website’s properties in your browser. A connection will be secure when "https://" appears in the browser's address bar instead of "http://" and a padlock symbol is displayed. You can look up more features of the SSL certificate in the Legal Notice section. 

 

Who is the Data Controller in charge of processing the personal data? 

Whenever personal data are collected and processed, we shall inform the User of the ACCIONA company who is the Data Controller in charge of processing, and we shall provide the corresponding identifying data.  

With regard to this Privacy Policy and this website, we would inform you that the Data Controller in charge of processing is: 

Company name: Acciona, S.A. 

Tax ID: A08001851. 

Address: Avenida de la Gran Vía de Hortaleza, 3, 28033, Madrid.

Telephone: +34 91 663 28 50 

Contact e-mail address: accionacorp@acciona.com 

The Data Protection Officer is a point of contact between you and the Data Controller; for any questions relating to the processing of personal data, if you wish, you may contact him at protecciondedatos@acciona.com. 

 

What personal data may we collect through our Channels? 

For the purposes of this Privacy Policy, "personal data" are data that identify a person or can be used to identify them.  

ACCIONA hereby informs its Users that their personal data, obtained through the Channels owned by ACCIONA, may only be collected for processing when they are adequate, relevant and not excessive in relation to the specific, explicit and legitimate scope and purposes for which they were obtained.  

Whenever personal data are collected through our Channels for specific purposes, Users will be provided beforehand with clear and unequivocal information on i) the Data Controller and its contact details, iii) the specific purposes of the processing and the basis for the legitimacy thereof, iv) the recipients or categories of recipients, where applicable, as well as the existence or not of international transfers, v) the storage criteria or periods, vi) and the rights enjoyed by Users in their capacity as data subjects.  

Users are also solely responsible for the information provided, and for the veracity and legality of the same. 

  • Information from third parties 

Whenever Users provide us with data concerning third parties, either voluntarily or because we require such data to comply with any legal obligation, Users consent to the processing and declare that the data are accurate. Likewise, Users declare that they have informed the third parties of the content of the present policy and/or of the policy that applies to them and of which they have been specifically informed, and of the corresponding rights relating to the Protection of Personal Data that are enjoyed by them. Notwithstanding the foregoing, ACCIONA will use its best efforts to act appropriately in relation to the processing of [the data of] such third parties. 

  • Public information 

ACCIONA may process information to which it may have access as information that is lawfully accessible to the public, and in particular, public information that is available in official registers. This processing will in any event only be done if there is a legitimate basis as set out in the applicable regulations and, whenever possible or where there is a contractual relationship, you will be informed. 

  • Personal data of minors 

ACCIONA does not knowingly collect personal data from minors without the consent of their parents, guardians or legal representatives. None of the Channels made available to Users by ACCIONA are designed for or directed at minors.  

If parents, guardians or legal representatives believe that their minor children have provided personal information without their consent, please contact us by e-mail at protecciondedatos@acciona.com. 

 

For what purpose and legitimate reasons does ACCIONA process personal data? 

ACCIONA processes the personal data of Users, collected through any of our Channels, for the purposes and on the legitimate bases as set out in detail and notified for each specific processing operation; however for your information only, we have set out some of these, which are more general in scope, below: 

  • To manage the relationship established with us 
  • For those services that we provide through APPs or online platforms, we process the data provided by Users in order to manage access credentials, provide assistance, answer queries, distribute our products and services, and manage the quality of the same. In other words, out of all the categories of data that may have been collected, we will only process those that allow us to be more efficient. 
  • In this sense, we will also process the data provided to respond to requests for services and requests for information from our Users received through any of our Channels, and to be able to deal with any suggestions, claims or complaints, where applicable.  

In such cases, we shall collect your data to enable us to implement the pre-contractual or contractual relationship that will allow us to provide you in an efficient manner with our products and services. 

  • We shall also process your data whenever you subscribe to any of our channels, newsletters or news bulletins alerting you to our products and/or services, or ask us to send you commercial communications, and the data you provide us with through the cookies collected when browsing online.  

Users’ informed and specific consent will form the legal basis for this part of the processing. 

  • To manage applications and participation in our selection processes 

Any interested party can apply for job vacancies, scholarships and/or specific programmes through our Employment Channel. The data and documentation received are in this case processed to evaluate applications and, should you give us your consent, to consider you for other possible ACCIONA vacancies, which may involve sharing the data with the Group company responsible for the vacancy in question. 

The legal basis for the processing is the implementation of pre-contractual measures, and the consent given if you wish to opt in to other possible vacancies. 

Full information on this processing is available at the following link: https://mediacdn.acciona.com/media/kkcjzq2f/politica-privacidad-candidatos-en.pdf

  • To manage contact details within the scope of contractual or commercial relationships 

We process contact details of potential customers, legal representatives of legal entities and organisations, whether public or private, analysts and investors or other concerned parties who provide us with their details, this in order to send them information of interest, to manage the commercial relationship that binds us and to be able to manage invitations or communications about events organised or sponsored by ACCIONA or in which ACCIONA participates. 

The basis for the legitimacy of such purposes is maintaining the pre-contractual, contractual and/or commercial relationship that binds us.  

  • Compliance with the legal obligations incumbent upon us 

Whether these legal obligations are of a commercial, fiscal, accounting or administrative nature, the legal basis authorising us to carry out this processing is compliance with legal obligations.   

  • Fraud management 

For some of the services that we provide, it is necessary to check on people’s identity in order to offer protection, detect and prevent fraud or other unlawful activities, unauthorised transactions, claims and other types of liabilities, and to manage quality and business-associated risks, and to investigate, where necessary, illegal activities and potential breaches of our policies and/or the terms and conditions of our services.  

The legal basis is compliance with the legal obligations that apply in each case. Inter alia, and by way of an example, Law 10/2010 of 28 April on the Prevention of Money Laundering and the Financing of Terrorism. 

  • Data obtained as the result of the provision of the service or product. 

ACCIONA may process data obtained through Users and data obtained as the result of the provision of the contracted service or product to adapt and improve our business activity and to make a very basic analysis of its use, but always within reasonable expectations based on the relationship that you as a User of ACCIONA have with us. The specifics of the data processed will be identified in the data protection clauses for each product or service.  

The legitimate basis for the processing is ACCIONA's legitimate interest in analysing or predicting in a very basic way aspects of its products and services in order to improve the administration and provision of those products and services. The right to object to such processing may be exercised in accordance with the provisions of the section on the rights of data subjects contained in every Privacy Policy. 

  • Security and surveillance of facilities 

Our facilities are equipped with cameras and video surveillance systems, with the aim of safeguarding the security of goods and people. 

The legitimate basis for the processing is ACCIONA's legitimate interest in ensuring the security of its facilities.   

  • Visitor and third party management 

In order to control the access of visitors, collaborators or other third parties to facilities, it is possible that, at some of our facilities, identification data may be collected. 

The legitimate basis is in this case consent, as well as ACCIONA's legitimate interest in ensuring the security of goods and people at its facilities. 

In the event of exceptional situations such as COVID-19 pandemic, if it was necessary to establish complementary access control measures, these measures will be informed in detail, at the entrances to each of the facilities. 

  • Ethical Channel Management 

ACCIONA has a reporting channel, known as the Ethical Channel, in which both employees and providers or third parties can confidentially report any breach of which they are aware. 

The legal basis for the processing of the data in this case is compliance with legal obligations for the investigation of suspected criminal offences. 

  • Direct marketing 

In general, unless prior consent has been obtained, ACCIONA does not use Users' personal data for direct marketing purposes. As a User, you may at any time unsubscribe from direct marketing campaigns and object to the future processing of your personal data for such purposes by sending us an e-mail to the address of the Data Controller or by using the relevant "unsubscribe" option included in e-mails.  

  • Automated decisions. 

ACCIONA does not carry out automated decision-making, including profiling, except in those cases in which Users are expressly informed of this and their express consent is requested.   

 

For other specific processing operations, please see the section Further information of this Privacy Policy. 

 

How long does ACCIONA keep Users’ personal data?  

In general, the data will be kept i) for as long as is necessary for the purpose for which the data were collected and ii) for the applicable limitation periods, if liabilities might be incurred as the result of the processing. 

On a special basis: 

The data collected for the purpose of responding to requests or enquiries will be kept for the time necessary to be able to attend to the same, but never for longer than twelve months. 

- The data collected based on your consent will be kept for as long as such consent is not withdrawn. 

- In all other cases, Users will be informed of the retention periods applicable to the specific processing operation. 

 

To whom is ACCIONA permitted to provide Users’ data? 

At ACCIONA we undertake not to transfer or disclose our Users’ personal information except as described in this Privacy Policy or, where applicable, as might be indicated at the time of collection of the data. 

  • We may exchange personal information with service providers, who are either ACCIONA companies or third parties and are in some cases contracted to perform services on our behalf. In these cases, the corresponding data processor agreements are signed whenever necessary, as established by the regulations on matters relating to data protection.  
  • We may disclose your personal information (1) if we are permitted or required to do so by law or by a process of law (such as a court order or subpoena); (2) to law enforcement agencies or other public officials to comply with a lawful and legitimate request; (3) whenever we consider this necessary to prevent physical harm or financial loss; (4) to establish, exercise or defend our legal rights; (5) in connection with an investigation of suspected or actual fraud or illegal activity; or (6) with Users’ express and informed consent. 
  • We reserve the right to transfer to a third party any information we hold about Users in the event of any actual or potential transfer or sale of all or part of our business or assets (including in the event of any merger, acquisition, joint venture, restructuring, assignment, dissolution or liquidation) or other structural or business operation. In this case, such third parties will be required to ensure levels of protection comparable to those provided by ACCIONA with respect to the information to be shared. 
  • ACCIONA is a global and interconnected company, hence we may exchange personal information within companies of the Group in the context of the centralisation of certain activities carried out by them as a corporate Group. You can look up the corporate structure of ACCIONA at any time in the annual report containing the most recent consolidated annual accounts, https://www.acciona.com/es/accionistas-inversores/informacion-financiera/cuentas-anuales/. Nevertheless, this transfer, assignment and processing of personal data within ACCIONA is carried out under the data protection laws in force and through the adoption and application of adequate guarantees designed to ensure the protection of Users’ privacy and fundamental rights and freedoms. In the event of such a transfer, this will be indicated for the specific processing operation and will require Users’ consent. 

Likewise, ACCIONA would inform you that some of these service providers, third parties or Group companies may be located in territories outside the European Economic Area that do not provide a level of data protection comparable to that of the European Union. In such cases we transfer Users’ data with appropriate safeguards, maintaining at all times the security of such data; these may include the formulation of Standard Contractual Clauses approved by the Commission, the content of which may be examined by clicking on the following link: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_es 

 

What are Users’ rights whenever we process their data? 

Users may exercise their rights of access to or rectification, erasure or portability of their data, and/or the restriction of or objection to the processing of such data, by contacting the corresponding Data Controller, by writing to the Personal Data Protection Department at Avenida de la Gran Vía de Hortaleza, 3, 28033, Madrid or by sending the form available at the following link:

See FORM 

If we consider this necessary to be able to identify you, we may request a copy of a document proving your identity.

You may likewise, at any time, withdraw the consent given by writing to the above address, and by filing a complaint with the relevant data protection Supervisory Authority ( https://www.agpd.es/portalwebAGPD/index-ides-idphp.ph ) and, in particular, with the Spanish Data Protection Agency ( www.aepd.es ).

Observation: During periods of an exceptional nature such as States of Alarm or Emergency, which imply periods of confinement, or other external disturbances such as natural disasters, extreme weather conditions or wars, rights which are exercised by ordinary mail rather than through the email account will have a longer response time than usual, with response times being re-established once the recommended confinement period has been lifted.

 

Further information

  • Attendance at ACCIONA Events

At those functions, training sessions, meetings, initiatives, etc. (hereinafter, “Events”) that are organised or promoted by ACCIONA at or away from its facilities, we may request Users to provide us with personal data in order to properly manage the Events and attendance at them. As an illustration, the subject matters that these data may be related to include but are not limited to the management of access, accreditation, means of transport and travel, accommodation, catering, delivery of related documentation, etc. This processing will be based on consent, moreover in certain cases, on the performance of a contractual relationship or statutory obligation.

This data may have to be transferred to any of the service providers or collaborating or sponsoring entities that participate or are involved in the Event, and Users will in each case be duly informed of this. As a general rule, we will only keep this information for the period of time strictly necessary to hold the Event and, where applicable, to comply with the limitation periods that may prove to be applicable.

Image: In addition to the processing done as the result of the need to ensure the security and surveillance of our facilities, it is possible that, as a consequence of Users’ participation in Events, their image, and on occasions their voice, may be captured and processed by ACCIONA by means of photographs and/or video recording. Where Events entail such processing, we shall expressly inform Users. This processing may be for internal or external purposes and/or for the purposes of promoting Events; consequently the said material could be used to reproduce the Event, distribute or transform it, communicate it publicly, set a date for it and make it available in any format or medium (including, as an illustration, but not limited to exploitation through analog or digital means and online, such as social profiles, websites or intranet owned by ACCIONA GROUP entities), without the said activities conferring any right to remuneration, consideration or economic gain on Users.

This processing is based on consent, either, whenever possible, as the result of Users giving their individual, explicit consent, or from their attendance at Events for which they were informed beforehand of the processing of their image. Users’ authorisation extends worldwide, is transferable (inside and outside ACCIONA) and remains in place for the entire duration of the intellectual property rights. Users may withdraw their consent at any time, through the appropriate channels.

The intellectual and industrial property rights over the materials generated on the occasion of the events and activities accrue exclusively to ACCIONA.

  • Social networking sites.

At ACCIONA we use social networks such as LinkedIn, Twitter, Facebook, Google+, Instagram and YouTube to share our content. We act in such networks as the Data Controller in charge of the data published by us, always processing such data in accordance with the terms and conditions established for each one of the social networks.

Interaction with Users through the use of such profiles or tools may involve the international transfer of data of an analytical and technical nature in relation to the Site and the social network profiles, with the data provided by Users through such profiles being processed on the servers of the social network companies.

Below you will find a series of links to further information on the specific processing of personal data . You will also find information about the website in the legal notice.

  • Applicants

https://mediacdn.acciona.com/media/kkcjzq2f/politica-privacidad-candidatos-en.pdf

  • Suppliers

https://acciona-procure.bravosolution.com/web_en/data_protection.html

  • Ethical channel

https://www.acciona.com/shareholders-investors/corporate-governance/rules-governance/compliance/

  • Customers:
  • Motorbike sharing

https://movilidad.acciona.com/en_ES/privacy-and-data-protection-policy/

  • Water

https://www.acciona.com/es/area-clientes/agua/ , where you can consult the Privacy Policy depending on which Municipality you are a customer of.

  • Solar farms

https://huertasolar.acciona.com/politica-de-privacidad/ExternInnerPage

  • Acciona Green Energy Developments

https://comercializadoragreenenergy.acciona.es/es/es/

  • Real property

https://inmobiliaria.acciona.com/privacy-policy/

https://inmobiliaria.acciona.com/clientes/en

  • Other businesses:
  • Bestinver

https://www.bestinver.es/en/politica-de-privacidad_en/

VALIDITY

If any change is made to the Privacy Policy and to information management practices, this will be reflected in a timely manner, however ACCIONA may supplement, amend or replace the said Policy whenever it considers this necessary.

This Privacy Policy is published in Spanish and English; in case of any discrepancy between the two versions, the Spanish version will prevail.

 

Last updated: 28 June 2023.

 

ACCIONA AUSTRALIA PRIVACY POLICY

  

Policy Statement 

All Australian-based subsidiaries of Acciona S.A. and its related bodies corporate (you can consult a list of Acciona Group companies ) recognise the importance of protecting the privacy and the rights of individuals in relation to their personal information. This document is our privacy policy, and it tells you how we collect and manage your personal information, including when you use our websites at (www.acciona.com.au and www.acciona.com).

We respect your rights to privacy under the Privacy Act 1988 (Cth) (Privacy Act) and we comply with all of the Act’s requirements in respect of the collection, management and disclosure of your personal information.

1.   WHAT IS YOUR PERSONAL INFORMATION?

When used in this privacy policy, the term “personal information” has the meaning given to it in the Privacy Act. In general terms, it is any information that can be used to personally identify you. This may include your name, address, telephone number, email address, passport number. If the information we collect personally identifies you, or you are reasonably identifiable from it, the information will be considered personal information.

We may collect sensitive information from you, and if we do so, we will do so in accordance with the Privacy Act. When used in this privacy policy, the term “sensitive information” has the meaning given to it in the Privacy Act. This may include information about your racial or ethnic origin, financial details, political opinions, socio economic status, political associations, memberships of any professional or trade associations, membership of trade unions, criminal records or health information.

 

2.   WHAT PERSONAL INFORMATION DO WE COLLECT AND HOLD?

We may collect the following types of personal information, depending on your interaction with us:

  • Name, date of birth and other identification details (for example as part of a job vacancy or specific programme through our Employment Channel or our Ethical Channel);
  • contact details include mailing or street address (including country), email address, telephone number;
  • details of your employment;
  • financial information about you, such as your income details and bank account;
  • any additional information that you chose to provide to us directly through our website, or our Employment Channel or our Ethical Channel;
  • details of the services that you acquire from us, together with any additional information necessary to complete the purchase transactions and to respond to your enquiries; and
  • any additional information relating to you that you provide to us through use of our websites or online presence, or through our representatives or during visits to our premises.

We may also collect some information that is not personal information because it does not identify you or anyone else.  For example, we may collect anonymous or aggregated information using web tracking technologies about how users use our website.

[1] Listed companies:  https://www.acciona.com/shareholders-investors/?_adin=11551547647

 

3.    HOW DO WE COLLECT YOUR PERSONAL INFORMATION? 

Generally, we collect your personal information directly from you unless it is unreasonable or impracticable to do so.  When collecting personal information from you, we may collect in ways including:

  • through your access and use of our website, including the use of our Ethical Channel;
  • during conversations and correspondences between you and our representatives; or
  • when you complete a job application, scholarship, or specific programmes through our Employment Channel such as an internship.

To the extent permitted by, law, we may also collect personal information from third parties including from third party companies such as credit reporting agencies, law enforcement agencies and other government entities. Otherwise, we do not generally collect personal information from third parties.

4.    COOKIES AND OTHER TRACKING TECHNOLOGIES

In some cases, we may also collect your personal information using cookies. When you access our website, we may send a “cookie” (which is a small summary file containing a unique ID number) to your computer. This enables us to recognise your computer and greet you each time you visit our website without bothering you with a request to register or login to website channels. Cookies also enable us to keep track of web pages and services that you view so that, if you consent, we can send you news and updates relating to your interests. We also use cookies to measure and analyse traffic patterns, to determine which areas of our website have been visited and to measure transaction patterns in the aggregate. We use this to research our users’ habits so that we can improve our online products and services. If you do not wish to receive cookies, you can set your browser so that your computer does not accept them. Please note that some services or features of our website will not function so well if cookies are disabled.

We may log IP addresses (that is, the electronic addresses of computers connected to the internet) to analyse trends, administer the website, track users’ movements, and gather broad demographic information.

5.    WHAT HAPPENS IF WE CAN’T COLLECT YOUR PERSONAL INFORMATION? 

If you do not provide us with the personal information described above, some or all the following may happen:

  • we may not be able to provide the requested website channels to you, either to the same standard or at all, or some features may not function properly;
  • we may not be able to provide you with information about our services that you may want, including information about new developments; or
  • we may be unable to tailor the content of our websites to your preferences and your experience of our websites may not be as enjoyable or useful.

You are never required to provide us with sensitive information to be able to use our website portals.

6.    FOR WHAT PURPOSES DO WE COLLECT, HOLD, USE AND DISCLOSE YOUR PERSONAL INFORMATION? 

We collect personal information about you so that we can perform our business activities and functions and to provide best possible quality of customer service.
We collect, hold, use and disclose your personal information for the following purposes:

  • to provide the Employment Channel and facilitate interaction between users of our websites and services to you and to send communications requested by you;
  • to provide the Ethical Channel for the purposes of corresponding with you over your query;
  • to answer enquiries and provide information or advice about our services and projects and manage commercial relationships;
  • to provide information about events organised or sponsored by us or which we participate in;
  • to assess the performance of the website and to improve the operation of the website;
  • to conduct business processing functions including providing personal information to our related bodies corporate, contractors, service providers or other third parties;
  • for the administrative, marketing (including direct marketing and advertising), planning, product or service development, quality control and research purposes of Acciona, its related bodies corporate, contractors or service providers;
  • to provide your updated personal information to our related bodies corporate, contractors or service providers;
  • to update our records and keep your contact details up to date;
  • to process and respond to any complaint made by you;
  • to generate statistics and derive insights from our data; and
  • to comply with any law, rule, regulation, lawful and binding determination, decision, or direction of a regulator, or in co-operation with any governmental authority of any country.

Your personal information will not be shared, sold, rented or disclosed other than as described in this Privacy Policy.

7.   TO WHOM MAY WE DISCLOSE YOUR INFORMATION?

We may disclose your personal information to:

  • our employees, related bodies corporate, contractors or service providers for the purposes of operation of our website or our business, fulfilling requests by you, and to otherwise provide services to you including, without limitation, web hosting providers, IT systems administrators, mailing houses, couriers, data entry service providers, electronic network administrators, and professional advisors such as accountants, solicitors, business advisors and consultants;
  • suppliers and other third parties with whom we have commercial relationships, for business, marketing, and related purposes; and
  • any organisation for any authorised purpose with your express consent or where required by law.

We may combine or share any information that we collect from you with information collected by any of our related bodies corporate (within Australia).

8.    HOW CAN YOU ACCESS AND CORRECT YOUR PERSONAL INFORMATION?

You may request access to any personal information we hold about you at any time by contacting us (see the details below). Where we hold information that you are entitled to access, we will try to provide you with suitable means of accessing it (for example, by mailing or emailing it to you). We may charge you a fee to cover our administrative and other reasonable costs in providing the information to you. We will not charge for simply making the request and will not charge for making any corrections to your personal information.

There may be instances where we cannot grant you access to the personal information we hold. For example, we may need to refuse access if granting access would interfere with the privacy of others or if it would result in a breach of confidentiality or giving access is unlawful. If that happens, we will give you written reasons for any refusal.

If you believe that personal information, we hold about you is incorrect, incomplete, or inaccurate, then you may request us to amend it. We will consider if the information requires amendment. If we do not agree that there are grounds for amendment, then we will add a note to the personal information stating that you disagree with it.

9.    WHAT IS THE PROCESS FOR COMPLAINING ABOUT A BREACH OF PRIVACY?

If you believe that your privacy has been breached, please contact us using the contact information below and provide details of the incident so that we can investigate it.

We request that complaints about breaches of privacy be made in writing, so we can be sure about the details of the complaint. Privacy complaints should be directed to us using the contact details below. We will attempt to confirm as appropriate and necessary with you your understanding of the conduct relevant to the complaint and what you expect as an outcome. We will inform you whether we will conduct an investigation, the name, title, and contact details of the investigating officer and the estimated completion date for the investigation process.

After we have completed our enquiries, we will contact you, usually in writing, to advise the outcome and invite a response to our conclusions about the complaint. If we receive a response from you, we will assess it and advise if we have changed our view.

If you are not satisfied with the way your privacy-related complaint is handled by us, you may refer your complaint to the Office of the Australian Information Commissioner (OAIC). Details of how to lodge a complaint with the OAIC may be found at www.oaic.gov.au or by calling 1300 363 992. 

10.    DO WE DISCLOSE YOUR PERSONAL INFORMATION TO ANYONE OUTSIDE AUSTRALIA?

We may disclose personal information to our related bodies corporate and third-party suppliers and service providers located overseas for some of the purposes listed above. Our IT systems that host our data (which may include your personal information) may also reside outside Australia.

We take reasonable steps to ensure that the overseas recipients of your personal information do not breach the privacy obligations relating to your personal information.

We may disclose your personal information to entities located outside of Australia, including the following:

  • our related bodies corporate, located in Spain, Canada, Mexico, Chile, Brazil, Middle East and Norway; and
  • our data hosting and other IT service providers, located in Spain.

11.    HOW WE PROTECT INFORMATION

We take reasonable steps to ensure your personal information is protected from misuse and loss and from unauthorised access, modification, or disclosure. We may hold your information in either electronic or hard copy form. Personal information is destroyed or de-identified when no longer needed.
Our security measures include:

  • role based access control to our ICT systems;
  • locked cabinets for storage of physical records containing personal information;
  • regular security vulnerability and penetration reviews and tests;
  • approach level of security training for technology staff and the broader business;
  • identity and access management processes and controls to key systems and information; and
  • external penetration testing of all systems holding sensitive data.

As our website is linked to the internet, and the internet is inherently insecure, we cannot provide any assurance regarding the security of transmission of information you communicate to us online. We also cannot guarantee that the information you supply will not be intercepted while being transmitted over the internet. Accordingly, any personal information or other information which you transmit to us online is transmitted at your own risk.

12.    RETAINING PERSONAL INFORMATION

We retain personal information for the period necessary to fulfil the purposes outlined in this Privacy Policy unless a longer retention period is required or permitted by applicable law. Please note that we often need to retain certain data for recordkeeping purposes. In addition, there may be certain data that we may not allow you to review for legal, security or other reasons.

13.    LINKS

Our website may contain links to other websites operated by third parties. We make no representations or warranties in relation to the privacy practices of any third-party website, and we are not responsible for the privacy policies or the content of any third-party website. Third party websites are responsible for informing you about their own privacy practices.

14.    CONTACTING US

If you have any questions about this Privacy Policy, any concerns, or a complaint regarding the treatment of your privacy or a possible breach of your privacy, please use the contact link on our website or using the details set out below.
We will treat your requests or complaints confidentially. Our representative will contact you within a reasonable time after receipt of your complaint to discuss your concerns and outline options regarding how they may be resolved. We will aim to ensure that your complaint is resolved in timely and appropriate manner.

Please contact us:
Acciona Energy Australia Global Pty Ltd
Post: Level 38, 360 Elizabeth Street, Melbourne, Victoria, 3000
Tel: +61 (3) 9027 1000
Email: privacyofficer.energia.au@acciona.com 

Acciona Infrastructure Asia Pacific Pty Ltd
Post: 174 Turner Street, Port Melbourne VIC 3000
Tel: +61 3 9624 4200
Email: privacyofficer.infra.au@acciona.com

15.    CHANGES TO OUR PRIVACY POLICY

We may change this privacy policy from time to time. Any updated versions of this privacy policy will be posted on our website. Please review it regularly.
This privacy policy was last updated on 7th May 2024